Definition location: Use the ellipsis and select the management group to save your copy of
the sample to.

Select the Artifacts tab at the top of the page or Next: Artifacts at the bottom of the
page.

Review the list of artifacts that make up the blueprint sample. Many of the artifacts have
parameters that we'll define later. Select Save Draft when you've finished reviewing the
blueprint sample.

Publish the sample copy

Your copy of the blueprint sample has now been created in your environment. It's created in
Draft mode and must be Published before it can be assigned and deployed. The copy of the
blueprint sample can be customized to your environment and needs, but that modification may move
it away from alignment with CIS Microsoft Azure Foundations Benchmark recommendations.

Select All services in the left pane. Search for and select Blueprints.

Select the Blueprint definitions page on the left. Use the filters to find your copy of the
blueprint sample and then select it.

Select Publish blueprint at the top of the page. In the new page on the right, provide a
Version for your copy of the blueprint sample. This property is useful for if you make a
modification later. Provide Change notes such as "First version published from the CIS
Microsoft Azure Foundations Benchmark blueprint sample." Then select Publish at the bottom of
the page.

Assign the sample copy

Once the copy of the blueprint sample has been successfully Published, it can be assigned to a
subscription within the management group it was saved to. This step is where parameters are
provided to make each deployment of the copy of the blueprint sample unique.

Select All services in the left pane. Search for and select Blueprints.

Select the Blueprint definitions page on the left. Use the filters to find your copy of the
blueprint sample and then select it.

Select Assign blueprint at the top of the blueprint definition page.

Provide the parameter values for the blueprint assignment:

Basics

Subscriptions: Select one or more of the subscriptions that are in the management group
you saved your copy of the blueprint sample to. If you select more than one subscription, an
assignment will be created for each using the parameters entered.

Assignment name: The name is pre-populated for you based on the name of the blueprint.
Change as needed or leave as is.

Location: Select a region for the managed identity to be created in. Azure Blueprint uses
this managed identity to deploy all artifacts in the assigned blueprint. To learn more, see
managed identities for Azure resources.

Blueprint definition version: Pick a Published version of your copy of the blueprint
sample.

The parameters defined in this section apply to the artifact under which it's defined. These
parameters are dynamic parameters since
they're defined during the assignment of the blueprint. For a full list or artifact parameters
and their descriptions, see Artifact parameters table.

Once all parameters have been entered, select Assign at the bottom of the page. The blueprint
assignment is created and artifact deployment begins. Deployment takes roughly an hour. To check
on the status of deployment, open the blueprint assignment.

Warning

The Azure Blueprints service and the built-in blueprint samples are free of cost. Azure
resources are priced by product. Use the pricing calculator
to estimate the cost of running resources deployed by this blueprint sample.

Artifact parameters table

The following table provides a list of the blueprint artifact parameters: